Bug#744817: CVE request: insecure temporary file handling in clang's scan-build utility

Murray McAllister mmcallis at redhat.com
Wed Apr 16 04:26:06 UTC 2014


Hello,

Jakub Wilk discovered that clang's scan-build utility insecurely handled 
temporary files. Full details in his report:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744817

Can a CVE please be assigned?

Cheers,

--
Murray McAllister / Red Hat Security Response Team

https://bugzilla.redhat.com/show_bug.cgi?id=1088105



More information about the Pkg-llvm-team mailing list